. ng cctld registry Technical overview

.NG CCTLD REGISTRY TECHNICAL OVERVIEW

Muhammed Rudman

[email protected]

www.nira.org.ng

14-09-2011

The .ng Registry Design

3R Registry ModelPublic WHOIS server on port 43Public WHOIS web interface EPP interface for the registrars Escrow backup with Cocca Stealth Primary Server SSH with user & IP restrictions

The .ng ccTLD network Architecture The registry

CentOS 5.2 Cocca registry software (web

& EPP) PostgreSQL Data Base

software Bind DNS software Primary Stealth DNS

Nsa.nic.net.ng Open BSD Bind DNS Software

NMS Tembria Server Monitor Paessler PRTG Kayoka helpdesk

Warm standby Router & Switch

New Power Design

Motorized Automatic Voltage Regulators (AVR) for each power source

Double Power source Dual Automatic

Transfer Switch (ATS) Multiple Power packs

in each equipment Remote monitoring of

power, with ability shutdown devices remotely

The New Network Design- Under review Redundant Site Fiber and Radio linking the two sites using VPN channel Multiple ISPs with diversity in uplink transit provider Multiple replication of registry Database with all nodes available Onsite and offsite backup system Multiple firewalls (stateful & stateless ) with Intrusion Detection System Dual authentication to all registrars into the registry: login details with either IP restrictions or Token

Network Monitoring

NIRA

Secondary Name Servers

ns1.nic.net.ng 194.0.1.29 I

Internet Computer Bureauns2.nic.net.ng 204.61.216.40

WoodyNet (PCH)ns3.nic.net.ng 208.78.70.93

Dynamic Network Servicesns4.nic.net.ng 204.13.250.93

Dynamic Network Servicesnsa.nic.net.ng 41.222.79.3

Nigeria nsb.nic.net.ng 72.167.122.8

GoDaddy.com (Recently removed)

Thank you

Questions ?